CVE-2024-33663

Name of the Vulnerable Software and Affected Versions python-jose versions 3.3.0 and earlier

Description The issue is related to algorithm confusion with OpenSSH ECDSA keys and other key formats in the python-jose component. It is associated with the definition of a prefix blacklist for OpenSSH ECDSA public keys. Exploitation of this issue may allow a remote attacker to gain unauthorized access to OpenSSH ECDSA public keys.

Recommendations For python-jose versions 3.3.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.